
SYSTEM AND METHOD FOR IMPLEMENTING NETWORK 
SECURITY POLICIES ON A COMMON NETWORK INFRASTRUCTURE 

ABSTRACT OF THE DISCLOSURE 
5 A secure network is provided which includes a plurality of 

network bubbles having a plurality of bubble partitions. Each bubble partition 
has at least one network device configured to transmit and receive data. All the 
network devices that belong to or correspond to a particular network bubble 
have the same network security policy. The secure network also includes a 
10 plurality of network control points, which has one or more network control 

point devices having at least one interface. Each bubble partition is connected 
to at least one network control point. The network control point is used to 
provide a connection between at least two network devices. Each network 
control point device is configured to enforce the network security policy of all 
15 the network bubbles that are connected to it. During the transmission of data 
from one network device to another network device, one or more network 
control points are traversed. 
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